---
title: "Discussion on \"CVE-2026-123039: How PHP2Shell Became Root on Check Point Gateways, and How to Close It\" | Hashnode"
description: "Discussion on \"CVE-2026-123039: How PHP2Shell Became Root on Check Point Gateways, and How to Close It\". Vulnerability briefing · 13 November 2026 · By the Rokkhe research team\nCVE-2026-123039 is a high-severity (CVSS 7.8) privilege escalation in the DynamicCLI service of Check Point Gaia OS. On 12 Novem"
url: "https://hashnode.com/posts/cve-2026-123039-how-php2shell-became-root-on-check-point-gateways-and-how-to-close-it/6af6e840cb278d13e11d3a2d"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [CVE-2026-123039: How PHP2Shell Became Root on Check Point Gateways, and How to Close It](https://rokkhe.hashnode.dev/cve-2026-123039-how-php2shell-became-root-on-check-point-gateways-and-how-to-close-it?utm_source=hashnode&utm_medium=feed)

Vulnerability briefing · 13 November 2026 · By the Rokkhe research team CVE-2026-123039 is a high-severity (CVSS 7.8) privilege escalation in the DynamicCLI service of Check Point Gaia OS. On 12 Novem

1d ago · 9 min read · rokkhe.hashnode.dev  
Read the article

-   [#security](https://hashnode.com/tag/security)
-   [#cybersecurity](https://hashnode.com/tag/cybersecurity)
-   [#devops](https://hashnode.com/tag/devops)
-   [#infosec](https://hashnode.com/tag/infosec)

## Written by

[Rokkhe](https://hashnode.com/@rokkhe)

@rokkhe · Strasbourg, France

  
[View profile](https://hashnode.com/@rokkhe)

AI pentesting & AI defensive security. NVIDIA Inception member.

## Responses

Markdown supported · ⌘↵ to post

No responses yet.